Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.mft
File:                     2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.mft (raw, json)
Hash identifier:          r5l7nAoMEVuMZ7zViKqGq2M9IuCqACcdOnyLGfo1efM=
Subject key identifier:   A6:90:1B:5F:A7:1F:38:0B:49:09:BF:8C:2A:08:2E:89:B6:7E:36:2C
Authority key identifier: 2C:7F:42:6F:49:AD:E0:70:F3:0D:2C:7C:2A:CF:B8:DF:CC:1E:F5:05
Certificate issuer:       /CN=2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505
Certificate serial:       6F3CCC8ED14102C1FF3AC92B9FAFBC3116D829D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.mft
Manifest number:          0A
Signing time:             Tue 27 Feb 2024 04:05:03 +0000
Manifest this update:     Tue 27 Feb 2024 04:00:03 +0000
Manifest next update:     Wed 28 Feb 2024 06:21:03 +0000
Files and hashes:         1: 3137372e36362e3234382e302f32312d3332203d3e203532363630.roa (hash: llA7D65o2Wavmyt5ibN85ybV9XU+RF6ZAA96lF2rWsg=)
                          2: 323830343a6330343a3a2f33322d313238203d3e203532363630.roa (hash: wQ4GWFss+GN+qXBaMHnoBgG/2B1AQdzDQsl908hqeGo=)
                          3: 2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.crl (hash: i8mIegseVK1dOZCJvzPrK4Wy6yh3tO8U55fqJMEWUxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3c:cc:8e:d1:41:02:c1:ff:3a:c9:2b:9f:af:bc:31:16:d8:29:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505
        Validity
            Not Before: Feb 27 04:00:03 2024 GMT
            Not After : Feb 28 06:21:03 2024 GMT
        Subject: CN=A6901B5FA71F380B4909BF8C2A082E89B67E362C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:e8:49:49:ce:a4:79:db:e6:67:15:99:46:
                    53:0e:87:c5:0b:9c:b0:1f:20:60:e9:3e:26:ff:e3:
                    9c:01:75:5c:d8:aa:cd:a2:5c:95:d1:25:64:5f:9b:
                    94:dd:79:38:b6:fd:72:18:c0:d9:f4:93:5a:ed:35:
                    81:4e:03:9b:d4:7e:d2:fa:97:e4:61:b1:6d:95:5b:
                    24:64:1f:ba:f9:35:2f:44:b0:fc:5a:30:94:19:83:
                    b3:1d:fe:ee:2a:77:4f:06:ea:5c:57:17:c6:f5:2d:
                    9c:e1:c1:9f:9c:d7:ad:28:25:26:6c:39:9b:71:14:
                    6f:d0:5a:d3:25:4e:3f:08:38:2f:78:f9:7e:57:21:
                    54:1b:02:ad:b7:e8:34:d0:9d:22:2d:f7:d8:2c:9f:
                    0c:78:6a:b8:66:03:45:fc:44:52:d5:36:df:06:37:
                    ad:7a:14:de:3e:db:70:aa:da:42:5b:1a:63:4a:03:
                    28:01:15:0e:9e:47:e2:12:d9:67:6f:81:9a:27:59:
                    3b:78:e8:af:3c:5b:25:07:2d:e7:55:89:3c:56:8e:
                    37:d8:a3:66:1a:87:72:52:43:98:0c:04:b8:84:79:
                    26:21:7e:0b:e4:a8:37:9c:3c:e3:55:58:89:c6:5d:
                    b5:7c:37:ed:91:34:a3:06:d8:ca:89:15:61:76:0d:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:1B:5F:A7:1F:38:0B:49:09:BF:8C:2A:08:2E:89:B6:7E:36:2C
            X509v3 Authority Key Identifier:
                keyid:2C:7F:42:6F:49:AD:E0:70:F3:0D:2C:7C:2A:CF:B8:DF:CC:1E:F5:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:70:2f:70:0f:a6:ce:38:09:63:c8:2f:14:97:33:9b:a4:
         28:f4:97:c5:50:77:4f:27:7d:9e:71:d3:a2:be:8d:76:cf:d3:
         36:e8:9b:03:b6:98:54:5b:7c:fc:90:9b:46:62:c1:77:69:d1:
         dd:5b:ad:ca:47:81:f5:92:db:c4:22:53:ef:5b:b4:f6:17:7f:
         a3:16:33:a0:03:36:25:19:ac:9a:1e:77:6c:85:a5:74:15:3b:
         6b:d8:a8:95:6d:57:6a:c3:6c:ce:90:0c:d6:1b:18:b7:0b:3c:
         4e:fb:2d:1d:5f:04:9e:d2:62:c7:78:bc:ba:3b:17:be:4a:03:
         1a:51:8c:33:35:ad:c3:f7:61:df:ce:a2:0b:fc:cc:9b:79:f5:
         84:f8:0a:4d:53:fc:c0:12:bc:9d:43:e7:dc:94:04:6b:8a:f5:
         26:6c:17:3b:2b:f3:02:da:ae:25:29:02:68:50:7d:44:9b:6b:
         39:a6:9c:48:6e:2b:b9:7b:41:e8:b9:3f:92:8c:d5:47:af:a8:
         a8:15:f9:48:fc:f6:e5:c8:16:39:c3:8f:87:74:b0:7c:04:fc:
         9b:bc:63:0f:a6:a0:34:95:05:02:bd:a0:0d:d6:3a:18:e7:b2:
         f3:66:8e:7f:be:a4:77:e4:dd:0e:f5:c5:c4:e5:15:94:e5:da:
         00:45:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----